Privacy Policy

Export Financing Norway (Eksfin) safeguards privacy by complying with the Personal Data Act in force at any given time. In addition to the Personal Data Act, as a government agency Eksfin is also subject to the Freedom of Information Act, the Public Administration Act, and the Archives Act.

This privacy policy sets out how Eksfin processes personal data. Eksfin, as represented by its CEO, is the Data Controller in relation to our processing of personal data.

Personal data refers to data or assessments that can be linked to an individual person. The processing of personal data refers to any use of personal data, including its collection, registration, compilation, storage, or disclosure.

The website www.eksfin.no and its contents and organization are fully owned by Eksfin, and the agency reserves all rights to this material. By accessing and using this website, you undertake to accept the following terms and conditions.

Purpose of and legal basis for processing

All processing of personal data is carried out in order to manage Eksfins activities. Any such administration may be in connection with application processes, recruitment processes, procurement processes or visiting our website. Eksfin does not use personal data for any other purpose. Processing of personal data is only lawful if:

The data subject has given consent to the processing of their personal data,
Processing is necessary for the performance of a contract,
Processing is necessary for compliance with a legal obligation,
Processing is necessary for legitimate interest purposes.

Personal data is deleted by Eksfin when it is no longer necessary to retain it, in order to fulfil the purpose.

Applications for guarantees and loans

The purpose of registration of personal data in relation to the submission of an application, is to provide us with the necessary contact details to process it. The following personal data will be registered: your name, telephone number, email address, role and company. Eksfin processes and archives all necessary data that is received in relation to an application. This personal data is processed based on the fulfilment of legal requirements, as Eksfin is subject to the Archives Act.

To improve Eksfins application portal, we also store the following information about each individual application: Time of delivery, type of application and application data. Additionally, technical data about the applicant’s internet browser, device, screen size, whether they have allowed the use of cookies, and whether the user is using a touch screen. All technical data is deleted within 14 days.

In relation to applications, we will also process the following personal data when conducting integrity due diligence (IDD) relating to key persons in the company: name, address, nationality, date of birth, details that appear in their passport or other identification documents (passport number/identification number, photo), criminal convictions, details about offences committed, and news articles. Personal data is registered in our CRM system in addition to our case management system where all data is stored in accordance with the Archives Act. The legal basis for processing of these personal data is purposes related to legitimate interests which outweigh considerations of the privacy of the individual. The legitimate interests are to prevent corruption, money laundering and terrorist financing, and to ensure compliance with sanctions obligations. Eksfin is authorised by the Norwegian Data Protection Authority to process personal data as set out in Article 9 (Processing of special categories of personal data) and Article 10 (Processing of personal data relating to criminal convictions and offences) of the General Data Protection Regulation in relation to this purpose.

It is possible to subscribe to Eksfins newsletter via the website. This newsletter features news updates, details of current issues being worked on, and invitations to events of which Eksfin is either the organizer or the co-organizer. The newsletter is sent approximately once per month.

By subscribing to the newsletter, you consent to the retention of your personal data by Eksfin in the eMarketeer system. It is possible to unsubscribe from the newsletter at any time, and we do not share this data with anyone else. The following personal data is stored in eMarketeer: your name and email address. This personal data is processed based on consent from the data subject.

Events and invitations

Eksfin organizes number of events on an annual basis, both as the sole organizer and in partnership with other co-organizers. If you register for an event via Eksfin then you may be invited to other events organized by Eksfin.

The following personal data will be processed: your name and email address. This personal data is processed based on consent from the data subject. You may withdraw your consent, and your personal data will be erased if you request its deletion.

From time to time, Eksfin invites external parties to give talks or presentations and Eksfin may on some occasions seek consent from the party to make video recordings in order to share the talk/presentation on an internal basis with all Eksfin employees. Video recordings will be deleted following a predefined number of days.

The following personal data will be processed: your name, email address and image(s). This personal data is processed based on consent of the data subject. This consent may be withdrawn, and the personal data (including the video) will be erased if the individual who previously gave their consent requests their deletion.

Eksfin maintains organizational profile pages on platforms such as Facebook and LinkedIn. This is to ensure that the organization is easily accessible and to disseminate details about Eksfins activities, offerings, and services.

By ‘liking’ Eksfins profile on Facebook and LinkedIn, you will disclose personal details including your gender, age, and geographical location. The use of these services is subject to the service providers own policies.

Advertising tools

Eksfin uses Google Ads as an advertising tool to advertise mainly on Google. Marketing cookies from Google Ads are used to track visits to the website. The purpose of this is to display advertisements that are relevant and engaging to the individual user and are thus more valuable to publishers and third-party advertisers.

The information we collect cannot be linked to you as an individual. This solution is solely used to ensure that Eksfins website is user friendly. You can delete Google cookies via Google Ads Settings.

Cookies

Eksfin uses cookies on its website for marketing and statistical purposes. Cookies can be turned on and off in most internet browsers on the user’s own device. By clicking on the following link you will access a list of cookies that we use and what purpose these serve, https://www.eksfin.no/no/cookies/.

The information we collect cannot be linked to you as an individual. This solution is solely used to collect statistics relating to the use of the website, i.e. to count the number of visitors and the frequency of their visits to the website, in addition to whether the site works on the displays and browsers that we are able to identify as being used by our users. We do this in order to be able to improve the services that Eksfin offers.

Procurement

Eksfin is required to conduct all procurement in accordance with the Public Procurement Regulation and the Public Procurement Act. Personal data is processed during procurement processes to fulfil the information and documentation requirements set out in the applicable regulations pertaining to public procurement. Eksfin does not use this personal data for any other purpose.

The following personal data is processed upon submission of tenders: supplier contact details, i.e. name, title, email address and telephone number. When inviting tenders for the supply of personnel, it may also be necessary to request personal details and CV, setting out the qualifications and experience of a supplier’s personnel. Data pertaining to a supplier’s employees, such as personnel who have been included in a tender, is used to assess tenders against the procurement award criteria. Criteria such as education, experience and other relevant background information is used in this context. Section 7-1 of the Public Procurement Regulation includes provisions relating to documentation requirements, which necessitate Eksfins retention of sufficient documentation to justify important decisions taken during the procurement process.

This personal data is processed based on the fulfilment of legal requirements. Eksfin archives personal data and other documents related to the procurement process in accordance with Section 7-1 of the Public Procurement Regulation pertaining to documentation requirements and Section 7-15 of the Norwegian National Archives Regulations concerning the retention and discarding of documents relating to procurement.

Personal data relating to suppliers will only be shared with third parties in those instances where it is necessary in connection with the delivery of the procurement and under the contract. Such third parties will be granted access to the data. In such instances, there will be a Data Processing Agreement in place between Eksfin and the relevant third party. Furthermore, documentation of this type may be shared in connection with audits, e.g. with Eksfins auditor.

Recruitment

Eksfin uses the Norwegian Agency for Public and Financial Management (DFØ) system module for HR recruitment to manage the submission of applications to all our vacancies. DFØ is our subcontractor with whom we have entered into a Data Processing Agreement in order to ensure that your personal data is processed in accordance with the Personal Data Act.

Access to your personal data is limited to those who have a professional need to process it. A Data Processing Agreement has been entered into with our subcontractors in order to ensure that your personal data is processed in accordance with the Personal Data Act.

Data relating to applications

To apply for a job, you must create a candidate profile. This candidate profile must include the following personal data: your name, email address and telephone number. Any additional data gathered will vary depending on the type of role that you are applying for, but a CV, an application form, details of citizenship, gender, date of birth, how you heard about the vacancy, and whether you have permission to work in the country where the job is located must all be provided when applying for all roles.

Information about which jobs you have applied for will be retained and details of the types of roles you are interested in receiving job notifications about may also be recorded. Personal data will also be processed in relation to roles where we consider it to be relevant following assessment, e.g. for management positions. This may include a background check, a personality test, responses to customised tasks, etc. This will be noted in the job advertisement if applicable. We may also request documentation relating to work permits, visas and/or police certificates of good conduct.

Special categories of personal data

You do not need to provide any special categories of personal data in your application or at interview. However, you may choose to do so. If there are any applicants in a pool of qualified applicants to a job who state that they have a disability, at least one such applicant must be invited to interview, cf. Section 4 of the Regulation relating to the Civil Servants Act. In our view, the processing of special categories of personal data is necessary in such circumstances in order for us to fulfil our obligations under employment law. This personal data is processed based on the provisions of the Civil Servants Act.

Job notifications

The purpose of processing personal data is to find the right candidate for a vacancy and to allow recruitment personnel to find your profile and contact appropriate candidates in connection with new vacancies. You can choose to receive email notifications about new vacancies. The purpose of receiving email notifications about new vacancies and details about career opportunities is to reach out to candidates who are interested in working for us, which in turn contributes to an improved recruitment process.

Basis for processing

This personal data is processed during the recruitment process based on consent of the data subject. The retention of applicant lists and settings on this basis is necessary to fulfil a legal obligation in accordance with the Archives Act. Relevant personal data pertaining to the successful candidate who is appointed in a recruitment process will be transferred to the candidate employee profile, and the basis for processing of data in this manner will be to fulfil a contractual agreement, i.e. a contract of employment.

You can withdraw your consent at any time via your profile by going to the ‘Privacy’ tab. If you choose to withdraw your consent to the terms and conditions applicable to DFØ HR recruitment system, your application will be removed from the recruitment process and any data you have submitted will be anonymised and made unavailable. You can also correct the data in your candidate profile. The consequence of deleting your profile will be that you drop out of any live recruitment processes, your profile is deleted and that you must create a new profile in order to apply for further jobs. The withdrawal of your consent will not affect the lawfulness of any processing of your personal data that occurred prior to your withdrawal of consent.

Errors and omissions on Eksfins website

The materials on Eksfins website may only be used for informational purposes. Information contained on www.eksfin.no is not intended to be complete and will not be up-to-date and accurate at all times. Errors may be present. Materials at www.eksfin.no must not be used as the basis for investment decisions or regarded as an invitation to enter into a contract. Eksfin assumes no responsibility for any errors, inaccuracies or omissions on its website. Eksfin cannot be held liable for any direct or indirect, consequential, or other forms of losses or damages of any kind that may arise as a result of access to or use of www.eksfin.no or its content. If you identify any errors or inaccuracies on the website, please let us know by email at post@eksfin.no.

Your rights

You can make a data subject access request to find out which personal data is being processed and stored about you.

You have the right to demand the correction of any personal data that is incorrect, incomplete or that you have not consented to the processing of.

You can request that the processing of your personal data be restricted.

In certain cases, you may object to our processing of your personal data.

You have the right to withdraw your consent to the processing of your personal data in those instances where consent has been granted.

You can demand the deletion of your personal data at any time. Eksfin may nevertheless retain such personal data if there exists a legal basis to do so.

Complaints

You have the right to complain to the Norwegian Data Protection Authority if you believe that your personal data is being processed unlawfully.

Contact

You can contact us via the contact details below if you would like to request access to or the correction of your data, or if you have any other questions.

Eksfin
P.O. Box 1763 Vika

N-0122 Oslo, Norway

Telephone: +47 22 87 62 00

Email: personvernombud@eksfin.no